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2331659 

RESOURCE RESERVATION 

TECHNICAL FTET.D OP THE T tjvfktt t/~wi 

This invention relates to the field of resource 
reservation, and in particular to a method of 
controlling access to a communications network, and to 
components of a network using such a method. 

DESCRTPTTO^ OP RELATRn &PT 

The Internet is a communications network which is 
becoming widely available. The Internet provides a 
"best effort" bearer service. That is, the user 
receives the best service available at the time he 
requests it, but no commitments are given to the user 
in terms of available bandwidth, transit delay, or 
packet loss. The Internet is particularly useful in 
data communications applications., but is of limited use 
for telecommunications applications which require 
guaranteed bandwidth availability, and specify maximum 
values for the transit delay and loss of data. The 
Internet cannot usually guarantee the required quality 
of service. 

One conventional way of achieving resource 
reservation, to be able to provide a required quality 
of service commitment, is to use connection states to 
. store information in the network nodes about bandwidth, 
buffer parameters, connection identity and status. 
However, an advantage of the Internet is that it is a 
connectionless network, which therefore cannot use this 
technique without sacrificing the simplicity of the 
Internet . 

One conventional way of achieving bearer service 
differentiation, in a connectionless network, is to use 
a set of priority bits in the packet header. However, 
in a public connectionless network, it is still • 
necessary to control how many connections use the 
highest available priority. if every connection uses 
the highest available priority, the network can still 



in e 
users . 



**«v a Vipst effort service to the 
ffect only offer a oest e J- tWi 



^orofnre as to how to control 
A problem remains, therefore, as 

admission to the network. 

ISSSi ^— subinvention seek^ to solve the problem 
of achieving admission control and resource reservation 
■in a connectionless network. . ■ 

1 ^cording to the invention, each transmission * • 
US er across the network includes a message sent to 
user fro. the network. The message includes 
information about the priority level of the 
transmission, based on the user's contract « 
network provider, and can subsequently be extracted by 
the network to determine how to handle the 

tranS Th us: 0 rather than rely on the network being able 
to detect the status of the connection, the relevant 
information is transmitted by the user with the data 
transmission, and can be extracted by the network as 

re9Ui In d pref erred embodiments, this information can be 
US ed for admission control and for routing purposes. 
For a better understanding of the present 
H _ and to show how it may be brought into 
effect reference will now be made, by way of example, 
to the accompanying drawings. 
„tot nES' 7° TP T T " w <W P" tMIHGS 

— Figure 1 is a schematic representation of a 
network in accordance with the invention. 

Figure 2 illustrates the flow of signaling 
messages in accordance with the invention. 

Figure 3 is a flow chart indicating the steps 
taken if.. method in accordance with the invention. 

Figure « is a graphical representation of an 
admission control procedure in accordance with one 



aspect of the invention. 

Figure 5 illustrates a ticket protocol in 
accordance with an aspect of the invention. 

Figure 6 illustrates a network operating in 
accordance with an aspect of the invention. 

Figure 7 illustrates a network operating in 
accordance with another aspect of the invention. 
rreTaTT.ED r>P..qrRTPTinTJ OF PREF TrePttD EMBODIMENTS 

Figure 1 represents a network in accordance with 
the invention. In Figure 1, a user at terminal A 
intends to send a message, in 'the form of data packets, 
to terminal B across the Internet. The Internet 
includes a large number of nodes, of which only a small 
number are shown in Figure 1. These are designated 
real-time routers RR, while the node to which the 
terminal A is connected is designated the access router 

AR. 

In accordance with preferred aspects of the 
invention, each node in the network, including users 
who may wish to send or receive data packets, has an 
internal clock. The clock at each node is used to 
measure time slots of size TO seconds, where TO is an 
arbitrary period of perhaps several seconds, chosen to 
be reliably greater than the maximum network transport 
delay. The nodes and terminals are synchronized to the 
network clock reference. 

As described herein, it is assumed that the 
network is able to support resource reservation from 
end to end. However, it will be appreciated that the 
invention is equally applicable when resource 
reservation is only available over a specific network 
domain, covering only a part of the end to end path. 
In such a case, the reservation protocol is terminated 
by the routers at the edges of that network domain. 

Resource reservation for a user data flow may be 
supported by different types of reservation protocols 



along the end-to-end path of the flow. For example, 
the protocol according to an aspect of the invention 
may be used over a specific network domain, covering 
only a part of the end-to-end path. An interworking 
function is then needed between the network domain 
supporting the protocol according to the invention and 
adjacent network domains using other types of 
reservation protocols. As a special case, an arbitrary 
type of reservation protocol can be used for the 
signalling between the user and the access node, while 
the network internal signalling is performed with the 
protocol according to the invention. The interworking 
function between the two types of reservation protocol 
is then located in the access node. 

Although the invention is described herein with 
reference to the Internet, it is applicable to any 
connectionless packet network, whether public or 
private . 

In accordance with preferred embodiments of the 
invention, the sender has a traffic contract with its 
network provider, under which a particular quality of 
service is guaranteed. This allows the network 
provider to offer service differentiation to users. 
Thus, users who are prepared to pay higher charges are 
able to guarantee access to higher bandwidths, or 
higher priority traffic handling. 

The flow of signalling messages during a data 
transmission will now be described with reference to 
Figure 2, while the steps taken in the access router, AR 
will be described with reference to the flow chart of 
Figure 3 . 

When the sender wishes to initiate a data 
transmission, a user resource reservation request REQ-U 
is sent from the terminal A at point PI in Figure 2 , 
and received at the access router AR in step 1 of the 
method of Figure 3. The resource reservation request 



specf.es the required bandwidth for the transmission 
the reared traffic class, the source address and the 
destination address. These parameters are thus set for 
the duration of the transmission at this stage 

In step 2 of the method, it is determined at the 
access router AR whether the resource reservation 
request passes the admission control. This admission 
control rs performed in a way which is described in 
more detail below, if the source reservation request 
does not pass the admission control, the request iT 
denied. 

need e r/ eS T " ^ bel ° W ' the -fetation 

needed for admission control is not stored in the 

ZT h T °T 3 COnneCti0n basis ' ^ can be extracted 

by the network as required from messages associated 
with every transmission which gains access to the 
network. Thus, these messages must contain all 
information which is necessary to allow the network 
nodes to perform admission control and policing of the 
transmission as required. 

If the resource reservation request passes the 
admission control, the method passes to step 3 at point 

Here, the access router AR sends a network 
resource reservation request req-n across the Internet 
to the terminal B. Each node in the transmission path 
can perform resource reservation and admission control. 
For example, at point P3, admission control is carried 
out by the node RR. If the required bandwidth is 

IZ T l£ T° SS neCW ° rk - an acknowledgement ACK is 
sent from the terminal B to the access router AR at 
point P4, and received in step 4 of the method 

Following receipt by the access router AR of the 
acknowledgement message ACK. required information about 
the state of the connection is passed from the network 

slc^T * " P ° lnt " "* ±n S " P 5 ° f Che -thod. 
specxfrcally, information about the resources allocated 
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te the connection, and other connection parameters (for 
example those specified in the traffic " 

M fI - «c. router AH to the sender * n 
tiek-t message hi. The information m the ticket 
„ saoe MX is preferably protected by a digital 

The calculation of the digital signature is 

in some ways to the priority bits ***** 
. packet header before message 
^1^^ the invention is determined by 

; ensure that ««™ service guarantees, 

accordance with their quality o Drior ity 
and ensures that users cannot reserve high priori 
resources which go beyond those 9-rant^ 

I„ one embodiment, the user """^ tne ticket- 
■ hits in a conventional way, but the ticket 

° Prl °"e y determined by the network and transmitted by 

message, Y states whioh priority 

the user with the data , _ particular 

levels may validly be set by the user for 

5 ^discussed in more detail below, the ticket 

" message TX. ~* !» -UP * f ^ - time 

i is sent at time TO, and xs vaiia io 

^ of-atL T 0 from TO until ~ Moreover ^ -U 
30 allows the node A to reserve t> ^ ^ 

preference to the admission control which is 

^Trecli^c"^ message Ml. the sender 
" at potnt PS in Figure 2. sends a data packet, together 
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with the ticket message Ml. 

At point P7 in Figure 2, and in step 7 of the 
method, the node AR is now able to police the data 
packet, by confirming that it complies with the 
original request REQ-U, in respect of which the ticket 
message Ml was issued. 

Assuming that the data packet does comply with the 
requirements specified in the ticket message, it is 
transmitted in step 8 of the method to the subsequent 
node RR, and hence to the receiving terminal B. 

At point P8 in Figure 8, the receiving terminal B 
sends an acknowledgement message ACK, which is returned 
to the access node AR, and received in step 9 of the 
method . 

At point P9 in Figure 2, and in step 10 of the 
method, a further ticket message M2 is then returned to 
the sending terminal A. This ticket message M2 is 
valid for the time slot from time Tl until T2, and 
effectively reserves band width for the subsequent time 
slot from time T2 until T3, as discussed above with 
reference to the message Ml. 

The process then cycles until such time as the 
sending terminal A has completed transmission. Thus, 
in step 11 of the method, a further data packet 
containing the ticket message M2 is received at the 
node AR. 

The method for performing admission control at a 
network node will now be described in more detail. In 
accordance with the invention, admission control is 
performed in each node of the network. Admission 
control is carried out on the basis of policy rules 
(for example, does the sender have a service contract 
which allows him to send a specific message type to a 
particular destination at a particular time), and on 
the basis of availability of resources. Admission 
control on the basis of policy rules is carried out in 
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a conventional way, while admission control on the 
basis of availability of resources is described further 
herein. 

As mentioned above, each node in the network has 
an internal clock, which works on the basis of time 

slots of length T„. 

in one embodiment, the phase of the periodical 
transmission of ticket messages from terminals is 
synchronised to a common reference, and the beginnings 
of the time intervals within the network nodes are 
synchronised to the same reference. Moreover, the time 
slot length T. is chosen to be longer than the worst 
case network transport delay. In this way, all tickets 
can be transmitted at times which guarantee that they 
arrive at network nodes at a safe distance from the 
edges of any time slot, thus ensuring that the tickets 
will be received within the intended, time slot. It is 
this situation which is illustrated in Figure 2 

However, in an alternative embodiment, the clocks 
in the different nodes need not be synchronised. 

As described above, a ticket message issued from 
an access router to a sending terminal, comprises in 
effect a permission to transmit a packet with a ^ 
specific band width at priority level until the ticket 
expires. The ticket is typically valid, for one time 
slot, which may for example have a duration of a few 
seconds. In the event that the user wishes to transmit 
data for a longer period, it is undesirable to force 
that user to make a completely new reservation request, 
with the associated risk that the request would be 
denied if resources were unavailable. Rather, in 
accordance with the invention,, a user having an 
established reservation has a higher priority, when 
renewing that reservation, than a user requesting a new 

35 reservation. 

Thus , as described above with reference to Figure 



25 



30 
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2, each ticket message Ml, M2, M3 , transmitted from the 
access router AR to the sending terminal A is itself 
valid for a current time period in order to prove that 
resources have been reserved for that time period, but 
is also valid to make a resource reservation for the 
immediately subsequent time slot. - - 

When the sending or receiving terminal wishes to 
terminate the reservation, a received ticket message 
can simply be discarded, and not returned to the access 
router. The loop is thus broken, and no new tickets 
are issued. The links along the path from sending 
terminal to receiving terminal will then calculate a 
decrease in the reserved bandwidth, and will thus be 
able to allocate more bandwidth for new resource 
reservations. 

Alternatively, if a sending terminal wishes to 
release bandwidth which has been reserved, it can send 
a release ticket message to the access router at any 
time. 

In addition, if, for any reason, a sending 
terminal does not receive a new ticket at an expected 
time, it transmits with its next packet of data a non- 
acknowledged { 11 NACK n ) ticket message in its place. 
This ticket NACK contains exactly the same information 
as the previously transmitted ticket. For the purposes 
of bandwidth reservation, one such non- acknowledged 
ticket message NACK can be treated as a valid renewal 
request . 

We can define an admission decision rule for the 
nodes in the network. Assume that a node gets a 
request for bandwidth B r on a link during time slot t n , 
i.e., it is necessary to decide whether to admit the 
flow for time slot t n . The admission decision is made 
on the basis that: 
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*«, - B r ~ B M - W + *M < 0 

where 

B is the maximum bandwidth that can be 

supported on the link. 
B a (t a ) is the total new bandwidth admitted on the 

link for time slot t n . 
Breq^n) is the requested and admitted bandwidth so 

far on the link for time slot t n . 
B t (tj is the bandwidth on the link released so far 

for time slot t n . 
Thus, the decision rule only depends on the 
internal time intervals within the nodes and the 
decision rule is the same, independent of whether the 
network is synchronised or not. Furthermore, this rule 
gives a "yes" if and only if indeed the requested . 
bandwidth can be supported by the link. 

Thus, the node stores link states, each containing 
the aggregate reserved bandwidth on a link, but does 
not store the reserved bandwidth allocated to a 
particular connection, although it can obtain this 
information from a ticket message sent on the 
connection. 



Then, let 



and let 



b m = *a> - B M> 



B M - *A> - *M - °- 



We update B a at the end of time slot t n as: 



where : 
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B m(t n ) is the bandwidth on the link measured from 

the "renew" and "NACK" tickets during time 
slot t n . 

BnackCtn) is the total bandwidth on the link from 
"NACK" tickets during time slot t n . 
The result is that, if a sender stops sending 
tickets and there are no lost tickets deeper in the 
network, the bandwidth is released after two' internal 
time intervals in all the nodes. This works' 
independent of the clocks of the different nodes. 

The. reason for using max ( 0 , B t ( t. a . x ) - B MCk (t n )) to 
update B a (t n ^) instead of just B 4 (t B . 1 ) - B^CtJ, is 
that if some bandwidth measured at the node is 
associated to a ticket which is lost deeper in the 
network, B^t,^) - B^Ct,,) might be greater than zero. 
If this is the case we should obviously not reserve 
more bandwidth than we already have reserved. 

This form of admission control is illustrated 
graphically in Figure 4 . 

In the example of Figure 4 the vertical axis 
represents the current estimate of the admitted 
bandwidth, while the horizontal axis is the time axis. 
The time at the particular node is divided into slots, 
as previously discussed, with the end points of the 
slots being designated TO, Tl, T2, and so on. Thus, in 
Figure 4, each rectangle represents a reservation or 
reservation request, with the height thereof 
representing the bandwidth required. White rectangles 
represent reservation requests, while shaded boxes 
represent allocated tickets which reserve bandwidth 
during a particular time slot. 

Thus, in Figure 4, at point tA, a bandwidth 
reservation request is received, and this remains valid 
for the time until TO, and for the whole of the 
subsequent time slot until Tl . At time tB, a second 
reservation request is received, and this remains valid 
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until the next end point Tl, and for the whole of the 
subsequent time slot until time T2 . A third 
reservation request is received at time tC, and, at 
each of these points, the estimate of admitted 
bandwidth is updated to include "bandwidth* requested in 
the most recently received reservation request. 

At time tD, a fourth reservation request is 
admitted, but the required bandwidth therefor is such 
that, to admit that flow would result in the estimate 
of admitted bandwidths exceeding the maximum bandwidth 
for that particular traffic class. Thus, the fourth 
reservation request is not admitted. 

At end point Tl, the ticket issued in respect of 
reservation request A becomes valid, and so, for the 
time slot from Tl until T2 , the bandwidth estimate is 
based on the bandwidth allocated by that ticket, and by 
the reservation request B and C. 

During the time slot from T2 until T3, tickets for 
the three flows A, B and C are all valid. At time T3 
ticket loop A stops, and so the estimate of admitted 
bandwidths falls. Similarly, at time T4 , ticket loop C 
stops, and the estimate of admitted bandwidth falls 
again. Finally, at time T5, ticket loop B stops, and 
the estimate of admitted bandwidth falls to zero. 

The discussion of admission control above has been 
on the basis that the network nodes are synchronised. 
However, as previously mentioned, the method and 
apparatus of the present invention may allow the use of 
a non- synchronised network, by an appropriate 
modification of the ticket messages. To achieve this, 
each node in the network works with internal time slots 
which are alternately designated «'0« and "1". When a 
node receives a ticket request, it then includes in the 
ticket a synchronisation bit which corresponds to the 
designation of the time slot in which the ticket 
request has been received. This ensures that, although 
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the different nodes in the network are not synchronised 
with each other, it is always possible to deduce the 
time slot in which a request has been received. The 
lack of synchronisation may mean that it is otherwise 
not possible to tell in which of two adjacent time 
slots a request has been received, but the 
synchronisation bit will always allow that distinction 
to be made . 

If a resource reservation request is allowed, that 
is, it passes the admission control, a ticket is issued 
as mentioned above. 

The ticket protocol, defining the form of the 
ticket, will now be described in more detail with 
reference to Figure 5. As will be apparent, the ticket 
needs to include source and destination addresses and 
an indication of priority in the IP-header, but must 
also contain other relevant information, which is 
preferably set out in a format as shown in Figure 5, 
and as described below. 

Counter 8 bits wide. A counter filed initialized 
to zero and incremented at each node where a 
synchronisation bit is used. This field is used for 
the nodes to find the correct synchronization bit. 

Length 8 bits wide. The length of the 
Authentication data field in 32 bit words. 

Signal 8 bits wide. Information of type of ticket 
message. 

Synchronization bits 4 0 bits wide. The 
synchronisation bits used by the nodes. This implies 
that a maximum of 4 0 admission nodes can be used for a 
non synchronised network. 

Bandwidth 32 bits wide. The reserved bandwidth 
over the link. 

Authentication data. The length of this field is 
variable, but is always an integral number of 32 -bit 
words . 
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If only the access node uses the authentication 
data it would be convenient to only use a 3 2 -bit 
authentication data field. If more nodes will use 
authentication data for the digital signature, we 
suggest that the authentication data field should be 
used as a stock where each node which uses an 
authentication data field either add or remove the 
authentication data from the stock. A default length 
of an authentication tag. should be 32 bits. 

A method for calculating the digital ticket 
signatures is now described. As mentioned above, all 
the nodes in the network have internal time slots, and 
successive time slots of the access node are designated 
as t 1( t 2 , t 3 , t 4 . ..- Each slot has a duration of time 

T - 

Each node, which wants to be able to put a, 
signature to a ticket, holds one general key and one 
series of time keys. The series of time keys is 
generated and kept internally within the node, and 
never transmitted to any location outside the node. 
The general key is denoted by k and the time dependent 
keys by k 1# k 2 , k 3 , k 4 , where each time interval t n 

is associated with a specific key k.. -The parts of the 
ticket message to be protected are denoted by m, and 
the ticket signature associated with this ticket 
message by s m . Thus, an authenticated ticket message 
issued by a real time node at slot t n consists of m 
concatenated with s,., i.e., [m, sj n . To sign a ticket 
message which arrives at the node time interval t n we 
use the keys k and k^ to sign the ticket message m. 
Let f be the signing function, thus, 

[m, sj„ = [m, flm, k, 

The signing function f can be chosen using the 
authentication method proposed in J.L. Carter and M.N. 
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Wegman, "New hash functions and their use in 
authentication and set equality". Journal of Computer 
and System sciences, vol. 22, pp. 265 . 279 . 19ei £ 
B. den Boer, "A simple and key-economical 
unconditionally secure authentication scheme". Journal 
of computer Security, vol. 2, pp. 65 . 71 , 1993 , ^ 
^Johansson, o. Kabatianskii and B. Smeets, "On the 
relation between A-codes and codes correcting 
^dependent errors", Proceedings of Eurocrypt u, cs 

Is brieflCT er i a9 ' PP ' 1 " 11 ' " 93 - ThS —hod 
briefly described below. 

Assume that we can rewrite m in the following way 

V " "* " U ' Where each % * CFW), i e an 
element in the finite field consisting of r bits." If „ 

we pad 0 bits to m such that the length equals a 
multiple of r. Furthermore, assume that k k. S 

Z'?-*' " ™" ^ f ° 110Wing — - calLate 
* a = A«, k, k n J = k B ^ x + m 1 • k + m 2 • k 2 + • • ■ + m { • k ! . 



Thxs gives a probability for anyone, who only 
observes one signature signed with. K , to succeed in 
changing m without detection by the access node, of- 
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independent of the computing power of the adversary 

To verify a ticket signature at time period n the 
uses the keys k and K to verify the signature 

according to the formula above, i ... . it ^the 

neTstoff " 3 Si3natUre Md thS *« "» 

kev to b f ° r / alCUlatin 9 * «• ticket signature. The 
key to be used is determined by the slot at which a 



ticket arrives downstream at a node. Thus „ the case 
when the network nodes are' not synchron.sed when the 
access node puts its stature to the ticket before 
forwarding it to the sender, it has to use the 
synchronisation hit to be able to deterge the correct 
key for calculating the signature, i.e.. the key 
corresponding to the slot time T. from when the t.cket 
firTt arrLu at the access node. The access node may 
pr erably P-tect the source and destination addresses 
In the IP-header and all ticket fields except the 
signal field. Nodes deeper in the network w hl =h want 
"Authenticate the ticket should protect the source 
and destination addresses and the reserved bandwidth^ 

« *-v,^ Hmp slot m which it is 
issued in respect of the time sioc 

""Tncidentally. since the source might not have a 
perfect clock, and due 'to the transmrssxon delay, the 
fccess node should preferably accept 
calculated both with key K and k,., around the 
transition from time interval t„ to t n . lv 

in accordance with aspects of the invention, the 
use of ticket messages can also allow management of 
traffic flows in the event that a route from sender to 
receiver must be changed. X node within a network has 
touting table, wnich determines the output post to 
\ ^ traffic for a particular destination must be 
lenf Tne luting tlbles are updated *uite freouently. 
for example due to routine traffic management ^ 
Procedures, a change in the network topology, or a Irnk 

£aiIU ina connectionless network a router i-ediately 
re-routes all the traffic related to a specie entry 
in the routing table when that entry x. updated. Th.s 
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works for best effort traffic but is not allowed for 
already established connections with reserved 
resources, which first must pass an admission control 
along the new path. Therefore a mechanism must be 
introduced to prevent this immediate rerouting of 
traffic with reserved resources . 

In accordance with this aspect of the invention, 
prior to the replacement of an output link in a routing 
table entry, the traffic on the link is stopped by 
discarding all tickets, thus breaking the ticket loop. 
Moreover, the reserved traffic that is routed according 
to the changed entry is given the low priority of 
unreserved traffic. The user must thereafter initiate 
a new reservation request in order to reserve resources 
along the .new path. 

The mechanism works as follows: suppose that the 
routing table changes from the "old" to the "new" set 
of router output ports in Table 1. As can be seen, the 
traffic that was previously routed to output port C is 
now routed to output port A or B. Since the traffic 
that has been rerouted has not passed any admission 
control on the new output ports, the ticket messages 
must be stopped, and the priority of the payload 
packets must be reset to the low priority of unreserved 
traffic. 
Table 1 



destination address 


old output port 


new output port 


destination address 1 


port C 


port A 


destination address 2 


port A 


port A 


destination address 3 


port B 


port B 


destination address 4 


port C 


port B 



This is achieved by introducing a temporary 
"switch-over" state for the entries in the routing 
table with a changed output port. Packets which are 
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routed according to the "switch-over" state are given 
the low priority of unreserved traffic, and ticket . 
messages are dropped. The principle is illustrated xn 
Table 2, which shows the routing table with the 
"switch-over" state. 
Table 2 



old output 
port 



switch-over state 



new output 
port 



dest address 1 



port C 



port A + drop 
ticket, lower 
priority 



port A 



dest address 2 



port A 



no change (port A) 



port A 



dest address 3 



port B 



no change (port B) 



port B 



dest address 4 



port 



port B + drop 
ticket, lower 
priority 



port B 



The switch-over state is kept until all ticket 
loops are broken, which takes two time intervals Ta, 
and is indicated by the absence of new ticket messages. 
The ticket protocol is then ready to operate as normal 
according to the new routing table, and the switch-over 
state will be terminated. 

Since the ticket loop has been broken, the user 
who wishes to restore the reservation must do this by 
issuing a new resource reservation request, which will 
be routed according to the new routing table. 

in some cases the change of the routing table xs 
the result of a well controlled network management 
activity, where the operator has ensured that 
sufficient .resources for the rerouted traffic are 
available on the new path. Then there is no need to 
force a new admission control and resource reservation 
procedure by breaking the ticket loop as described 
above. The switch-over mechanism should therefore be 
disabled in this type of controlled rerouting. The 
user data flow and the ticket messages are then 
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rerouted as soon as the routing table is changed. The 
resource reservation is controlled by the ticket 
message and will thus be installed on the new path 
Sxnce it is assumed that resources are available on the 
new path, no admission control procedure is needed when 
installing the new reservation, and there is thus no 
need for the user to send a resource reservation 
request message. The user does not have to be notified 
about the route change and just continues to send 
ticket messages as usual. 

In a network operating in accordance with aspects 
of the mvention, the sender of the user data flow 
makes a resource reservation and will in most cases be 
charged for this reservation. it is therefore natural 
that the sender will have an interest in the 
performance of the network service. m order to 
deliver performance feedback to the sender, the 
receiving terminal measures the performance of the 
received packet flow in terms of delay and packet loss 
The result of the measurement can then be delivered to 
the sending terminal by inserting it in the ACK and 
ticket messages discussed previously and shown in 
Figure 2 . 

in accordance with aspects of the invention, 
admission control and resource reservation are done on 
a hop by hop basis, i.e., the decision to accept or 
re 3 ect a reservation is made locally by a resource 
management entity at each router. However, in some 
cases it may be advantageous to perform the resource 
management in a centralised manner. The introduction 
of -source management into a best effort network can 
then be achieved by adding a central resource 
management controller. The need for updating or 
replacing already installed routes can then be 
minimized, since they do not need to handle the 
admission control and resource reservation functions 



The ticket protocol discussed above might be used 
in this type o f network as described with reference to 
xn this typ a network operating in 

Fi gure6. Fl ^ t of the invention. The 

accordance with an aspect o 

network is divided into subnetworks. ^ = -° 

i j_ -\ o r e shown in Figure o- ^^.^ 
(sub net 1 "^£7^. manag ement conquer 
- from sender A to receiver B, Che 

' 7 within each subnetwork is designated as an 

R - A resource reservation request KSQ fro, the senaer. 

* a to the resource management controller 
A is forwarded to the reso _ admiss ion control 

EMC This controller handles all the admi 
^'resource reservation within a subnetwork^ The 
Stroller keeps'a record of all the resource ^ 

nations ^fj;; o -r:r^ 

information, the contro reservation 
control, i.e. ~ u "j££, Z revest is 

^^"a d " th! rt sub^twir along the path towards 
forwarded to the next edure is repeated. If 

the destination, where the pr ^ „_ erved all the 
the resources have successfully been reserved 

I! the destination, an acknowledgement «xll be 
ZZT- - access router, ^ - - 

:::::: r-s. — - P ~ n:r — ■ 

th e ticket message duration 
Alternatively the ticket ^ and By 

of only one time slot, as described 
nee d to be renewed with each data packet. 

with reference to '^- ' f 1 ^ che opera tion of 

' nvrroi:::;%r;- undent * — . 

the ticket protocol is whether 
source management -^^^ ™ter hop by hop 
resource management is per^u 
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basis. 



across^Y"' iS f0rwarded <*• optimum path 

across the network, and does not need to pass the 

resource management controllers". The ticket message 

so L r T V " reS ° UrCe — 9— t controllers 
so that they can keep track of the status of each 

connection. 

Alternatively, as shown in Figure 7, the ticket 

d m atT 9e L C \? e r ° UCed alM9 Path "»» ™« 

then' I I r ° UterS *" t0 MCh ^twork would 

whin th reSOUr ° e -»«*•«" controller RMC only 

when the t.cket message indicates a change in the 
status of the connection. The latter alternative is 
advantageous for a large subnetwork where the resource 
management controller would be over-loaded by all t ™ 

the 11 T'T *• ^ ° aly SendinS 3 -""-tion when 
the status of each connection is changed, the number of 
messages to the controller can be reduced. 

If all the ticket messages are forwarded to the 
controller, then it can operate without storing states 
about each connection. „ only change ^J^" 
about the status of each connection are sent from the 
access router to the controller, then both the access 
router « and the controller KMC must keep states per 
connection. y 

It must also be possible for the resource 
management controller to terminate the reservation by 

L r : a tic n Lr e tiCket l0 ° P - ™ S ^ S — — orwara wL n 
the t.cket messages are routed via the controller as in 

L lgUr V' SinCS ^ 0311 the — g e 

When the ticket messages are routed along with the 

data t he resource management controller RMC sends a 
notification to the access controller with an 
instruction to break the ticket loop for a specific 
connection by discarding the corresponding ticket 
message. 
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• • 0 rtant to note that the ticket protocol 
It is important to ^ 

^ user and the network is 

completely maep ^ interna i 

5 matter for the n ,_ ralised resource management 

should be "reference to rigures « and 

^roller as de - ^ 

1, or if resourc dist ributed manner by a 

should be performed in router hop . 

L0 resource management entity « tion is th at an 

A further advantage o£ the mve 

^ose to run his network in a 
operator can choose to ^ herein , or in a 

connectionless manner, as «^ informati on in the. 
connection oriented mode , coimecti on 

IS revest and ticket messages to se JP 

state for the data flow- A sing 

„>, ..vetal operator domains, can p» 
through several f b 

networks operating , in both modes. J^JT ^ 
advantageous to use a ^ ^ rest of 

access router to supp ctionless ma nner. 

the op "^ e d e S cribea - sy°™ " hich all °" s 

There is thus descnn conne ctionless 
hearer service differentiation m a conne 



network . 
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CLAIMS 



35 



1. A method of reserving network resources for a 
transmission, the method comprising: 

at an access node in the network, receiving 
5 resource reservation requests from sending network 

users connected thereto, each resource reservation 
request specifying an intended destination and a 
bandwidth requirement; 

in response to each received resource reservation 
request, performing an admission contro! procedure- 

m f 6 eVent th " the "source reservation request 

The \ T Si ° n C ° ntr01 ' tranSm ittlng a a-oss 
the network to the intended destination associated 

therewith to allow other nodes to perform admission 

ii> control procedures; 

in the event that the resource reservation request 
Passes all admission control procedures to the intended 
destination, sending from the access node to the 
sending network user associated therewith a ticket 
message containing all necessary connection 
inf orma t i on ; and 

from *; iOWin * aCCesS to th * network for a transmission 
from the sendang network user when the transmission 
includes the ticket message, 

wherein the admission control procedure at the 

avLT^°t determineS Wheth - th * -quired resource is 
available during a time slot by: 

determining what resources have already been 
allocated during said time slot, and what resources 
have already been reserved or requested, 

wherein sending a ticket from the access node to 
the sending network user during a time slot allocates 
the required resources for said time slot, and reserves 
the required resources for a second time slot 
immediately following said time slot. 

2. A method as claimed in claim 1, wherein, when 



20 
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= T,™ae receives a transmission from the 
the access node recel ticket me ssage, a 

sending network «~ the aoce ss node to 

second ticket sending . ticke t from 

the sending network t user during the 

ZZ^TJl^ the reared resoles £ or 

resources for a tniru ua. 

said second ^°; f ' allocating bandwid th on a network 

n ■ v the method comprising determining whether 
link, the metnuu , link during a 

retired bandwidth is liable. 

^ca tg^e han^dth^or said time slot and tor a 
t me "^immediately mowing £or a 

4 A method of reserving network " s ° u * 

. » first network user, the method 

transmission from a tirsc 

"° mPrl d S ei!nin g a succession of time .lot. based on a 

ClOCk r S ecfiving at a node in the network a resource 
reservation revest from, the first network user to 

initiate a rese «£o»^ ^ available 

confirming that the requx 

3 "TlUir^cer^ the network for a transmit 
frora fht first network user when the ; ing 
includes the ticket message, the ticket S 

-. for a duration of one time slot, 
valid for a auwt c i a im 4, wherein 

5 a method as claimed m claim , 

su cdessive time slots at ^ ^^t^USl 
alternating binary values, and ^ ' „ the 

includes a synchronistic bi ~ P ^ 
binary value denoting a time slot 
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message was generated. 

6. A method as claimed in claim 4, wherein the 
ticket message includes a digital signature, calculated 
on the basis of a key which is used only during a time 
slot in which said ticket message was generated. 

7. A method of reserving network resources for a 
transmission from a first network user, the method 
comprising: 

receiving at a node in the network a resource 
reservation request from the first network user to 
initiate a reservation; 

confirming that the required resource is available 
on a first link from said node to a destination 
address; 

15 sending from the network to the first network user 

a ticket message containing connection information; and 
allowing access to the network for a transmission 

from the first network user when the transmission 

includes the ticket message, 
20 wherein, when it is determined that the link is no 

longer available and that an alternative link must be 

used, the ticket message is dropped. 

8. A method of reserving network resources for a 

transmission from a first network user, the method 
25 comprising: 

receiving at a node in the network a resource 
reservation request from the first network user to 
initiate a reservation; 

confirming that the required resource is available 
30 on a link from said node; 

sending from the network to the first network user 
a ticket message containing connection information; and 

allowing access to the network for a transmission 
from the first network user when the transmission 
35 includes the ticket message, 

wherein it is determined whether to allow access 
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15 



to the network on the basis of resources allocated by 
previous ticket messages, and 

wherein the ticket message remains valid for a 
predetermined time period such that, in the event of a 
5 network error, the resources allocated thereby are 

released after expiry of the predetermined time period. 

9. A method of reserving network resources for a 
transmission from a first network user, the method 
comprising: 

10 receiving at a node in the network a resource 

reservation request from the first network user to 
initiate a reservation; 

confirming that the required resource is available 

on a link from said node; 

sending from the network to the first network user 
a ticket message containing connection information; and 

allowing access to the network for a transmission 
from the first network user when the transmission 
includes the ticket message, 
2Q the ticket message being valid for one time slot, 

as defined by the network, and including a digital 
signature, calculated on the basis of a key which is 
used only during a time slot in which said ticket 
message was generated. 
25 io. A method as claimed in claim 9. wherein when 

a transmission including the ticket message has been 
completed, the network sends to the first network user 
a second ticket message containing connection 
information, the second ticket message being valid for 
30 a further one time slot. 

11. A method of reserving network resources for a 
transmission from a first network user, the method 
comprising: 

receiving at a node in the network a resource 
35 reservation request from the first network user to 

initiate a reservation; 
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confirming that the required resource is available 
on a link from said node; 

sending from the network to the first network user 
a ticket message containing all necessary connection 
information; and 

allowing access to the network for a transmission 
from the first network user when the transmission 
includes the ticket message, 

wherein the determination as to whether the 
required resource is available on the link is made at a 
central resource controller. 

12. A method as claimed in claim 11, wherein the 
central resource controller controls the allocation of 
resources within a subnetwork made up of a plurality of 
nodes . 
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